Search found 8 matches

by Thierry
03 Feb 2022, 04:01
Forum: General Discussion (csf)
Topic: Disabling IMAP LFD for a single user
Replies: 1
Views: 697

Disabling IMAP LFD for a single user

Hi Is it possible to disable login failure detection of IMAP in the CSF configuration for a particular user? I would like to make sure login failure in a single account do not add the user IP to a deny list. Some customers just don’t understand why they are blocked, but it might be an old ipod in th...
by Thierry
22 Sep 2021, 17:56
Forum: General Discussion (csf)
Topic: Cpanel updates and LFD System Integrity check - Needs support
Replies: 1
Views: 939

Cpanel updates and LFD System Integrity check - Needs support

When Cpanel updates it modifies MANY files. And CSF warns the administrator about these changes. I have created a feature request on Cpanel that was just approved so the update process try to inform CSF LFD of those changes so it stops barking at it. Please support this feature request here: https:/...
by Thierry
03 Apr 2021, 13:30
Forum: General Discussion (csf)
Topic: Country in IP Detection
Replies: 1
Views: 1572

Country in IP Detection

Hi When I receive an LFD email the subject is something like SSH login alert for user root from xxx.xxx.xxx.xxx (FR/France/user.domain.com) But that server connecting is NOT in France. It is in Canada. And when I check https://www.iplocation.net/ip-lookup the IP is clearly publicly in Canada. Which ...
by Thierry
20 Oct 2020, 15:26
Forum: General Discussion (csf)
Topic: Mail log Grep - More info CSF triggering actions
Replies: 0
Views: 1670

Mail log Grep - More info CSF triggering actions

Hi, Our clients OFTEN get blocked by CSF/LFD due to mail bad login attempts, or stuff like that. They are in offices with multiple email clients (outlook or other). They always tell me that they did not change anything. But it MIGHT be one of their employees with an iPhone misconfiguring their accou...
by Thierry
27 Jun 2019, 16:04
Forum: General Discussion (csf)
Topic: CSF blocking an IP because of Exim syntax errors
Replies: 1
Views: 7400

CSF blocking an IP because of Exim syntax errors

An IP just got blocked by CSF Temporary Blocks: IP:xx.xx.xx.xx Port: Dir:inout TTL:86400 (lfd - **(eximsyntax) Exim syntax errors from xx.xx.xx.xx** (US/United States/ipxx.xx.xx.xx.net): 10 in the last 3600 secs) The to address in a recipient contains "single quotation marks " which seems ...
by Thierry
11 Sep 2018, 15:46
Forum: General Discussion (csf)
Topic: Auto-Ban trap page
Replies: 1
Views: 2220

Auto-Ban trap page

Hi Is there a way with CSF/LFD to define a few URLs on our server or page name like xmlrpc.php... And as soon as you call this page and you are not on the white list, we ban your IP for 24 hours for the whole server. We KNOW that if you try to call xmlrpc.php on our server, that you are a hacker. We...
by Thierry
27 May 2009, 13:48
Forum: Suggestions (csf)
Topic: Check Server Security - weighted score
Replies: 2
Views: 3569

Hi chirpy, yes this would be great! :) If you fear subjectivity of such values, maybe you can make this configurable with a default that you evaluate the best. So we can change those values ourselves if ever we feel you were out of your mind. ;) In any case, the default values could be very close to...
by Thierry
18 May 2009, 22:45
Forum: Suggestions (csf)
Topic: Check Server Security - weighted score
Replies: 2
Views: 3569

Check Server Security - weighted score

hi,
In the Check Server Security, is there a way to get a weighted score rather that a simple addition of secured areas?

If not, I'd like to see WHICH are most important than others. Is there an ordered list anywhere?

thanks! :)